Home › Companies › Vuoriinc › Sr. Cyber Governance, Risk & Compliance Analyst
Sr. Cyber Governance, Risk & Compliance Analyst
Vuoriinc · Carlsbad, CA, United States · Active · $117,000–$151,000 / year · SmartRecruiters
Job facts
| Field | Value |
|---|---|
| Company | Vuoriinc |
| Title | Sr. Cyber Governance, Risk & Compliance Analyst |
| Normalized title | - |
| Department / team | HQ - Legal |
| Location | Carlsbad, CA, United States |
| Work model | - |
| Employment type | Full Time |
| Salary | $117,000–$151,000 / year |
| Status | active |
| ATS provider | SmartRecruiters |
| Posted / first seen | 2026-06-16 / 2026-06-17 |
| Changed / last seen | 2026-06-17 / 2026-06-19 |
Related slices
| Page | What it contains | Open |
|---|---|---|
| Company jobs | Active postings from Vuoriinc. | Open |
| Company breakdowns | Role, location, ATS, and work model facets for this company. | Open |
| ATS provider jobs | Active postings observed through SmartRecruiters. | Open |
| Provider filtered search | The same provider as a filtered job collection. | Open |
| City jobs | Active postings in Carlsbad. | Open |
| Department jobs | Active postings in HQ - Legal. | Open |
| Lifecycle events | Open, update, close, and reopen events for this posting. | Open |
| Original posting | Canonical source or apply URL captured from the ATS. | Open |
Linked records
| Company | Vuoriinc |
| Source | f98cc127-bcaf-44f0-8de7-5b489d57be28 |
| ATS provider | SmartRecruiters |
Description
Vuori is re-defining what athletic apparel looks like: built to move and sweat in but designed with a casual aesthetic to transition into everyday life. We draw inspiration from an active coastal California lifestyle; an integration of fitness, creative expression and life. Our high energy fast paced retail environment is reflected in the clothes we make. We aim to inspire others to take on all aspects of their lives with clarity, enthusiasm and purpose…while having a lot of fun along the way. We are proud to be an outlet for opportunity and for personal growth and success.
The Senior Cyber Governance, Risk & Compliance Analyst is a senior level security professional whose primary responsibility is to design, operate, and continuously mature the organization’s Third‑Party / Vendor Risk Management (TPRM) program. In this role, the analyst serves as an embedded risk partner to the business, driving consistent, high‑quality vendor risk outcomes across the full third‑party lifecycle.
While TPRM is the core focus of this role, the analyst is also expected to contribute meaningfully across other Information Security and Privacy domains as needed, including privacy operations, cyber governance, risk and compliance (GRC), and security operations. This role is ideal for a practitioner who enjoys vendor risk but is comfortable flexing across adjacent security functions in a fast-moving environment.
What you'll get to do:
Third‑Party / Vendor Risk Management (Primary Focus)
Design, implement, operate, and continuously mature the Third‑Party Risk Management program, evolving it from a reactive, compliance driven function into a proactive, risk-based capability. Execute and oversee the full third-party risk lifecycle, including onboarding, inherent and residual risk assessments, due diligence, periodic reviews, contract risk review, issue management, remediation tracking, and ongoing monitoring. Perform deep technical security and risk assessments of third parties, including cloud services, SaaS platforms, infrastructure providers, and technology vendors. Review and interpret security assurance artifacts such as SOC 2 Type II reports, penetration test reports, CAIQ, SIG, ISO certifications, and other compliance attestations. Evaluate complex vendor solutions, including API integrations with critical internal systems, cloud native architectures (AWS, Azure, GCP), and AI/ML platforms. Assess and manages emerging third-party risks, including artificial intelligence risks such as data provenance, model integrity, data leakage, and secure handling of proprietary or regulated data. Lead end-to-end issue and remediation management, ensuring accountability, effectiveness, and timely closure of identified control gaps. Develop and maintain TPRM standards, playbooks, governance models, escalation paths, and operating procedures aligned with regulatory expectations and business needs. Build and deliver meaningful reporting, dashboards, and metrics that provide leadership with clear visibility into third-party risk posture, trends, and decision points. Privacy & Data Protection (Primary Focus)
Support privacy operations, including Data Subject Requests (DSRs), Data Protection Impact Assessments (DPIAs), and data mapping initiatives. Partner with Privacy and Legal stakeholders to assess vendor and internal data processing risks and ensure appropriate safeguards are in place. Contribute to privacy related risk assessments, controls validation, and remediation tracking as needed. Cyber Governance, Risk & Compliance (Supporting Responsibility)
Support cyber GRC activities, including tracking information security risks, risk exceptions, and remediation plans. Assist with the implementation and ongoing operation of security and risk management frameworks (e.g., NIST, ISO, SOC 2). Contribute to audit and assurance activities by providing risk assessments, evidence, and clear articulation of control posture. Security Operations & Enablement (Supporting Responsibility)
Provide support to information security operations as needed, including incident response activities, impact analysis, and post incident follow‑up. Contribute to security awareness and training initiatives, helping translate risk themes into actionable guidance for the business. Assist with cross functional security initiatives during periods of increased demand or emerging risk. Business Partnership & Advisory
Serve as a trusted risk advisor to vendor relationship owners and senior stakeholders, reducing their operational burden while preserving clear risk ownership and accountability. Partner closely with Legal, Compliance, Procurement, Technology, and Security teams to synthesize requirements and deliver practical, risk‑appropriate solutions. Review vendor contracts and summarize risk‑relevant provisions, control obligations, and gaps, partnering with Legal to support risk‑informed contract decisions. Escalate material risks, delays, or control gaps thoughtfully and early, framing issues in clear business terms and presenting well‑defined options for decision‑making.
Who you are:
7+ years of progressive experience in Information Security, Third‑Party Risk Management, Vendor Risk Management, GRC, or Operational Risk. Demonstrated experience owning, building, or leading a Third‑Party / Vendor Risk Management program. Bachelor's degree in information security, Computer Science, Business Administration, or a related field or equivalent practical experience. Strong experience conducting security risk assessments, assurance reviews, audits, and remediation management. Deep technical understanding of cloud, SaaS, infrastructure, and AI vendor risk. Hands on experience reviewing SOC 2, ISO 27001, penetration test reports, CAIQ, SIG, and similar security documentation. Strong written and verbal communication skills, with the ability to translate technical risk into a clear business context for diverse audiences, including senior leadership. Proven ability to work autonomously, manage competing priorities, and drive outcomes in a fast paced environment.
Our investment in you:
At Vuori, we’re proud to offer the following to our employees:
Health Insurance Savings and Retirement Plan Employee Assistance Program Generous Vuori Discount & Industry Perks Paid Time Off Wellness & Fitness benefits The salary range for this role is $117,000 per year - $151,000 per year. This role is bonus eligible.
Vuori is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.
All your information will be kept confidential according to EEO guidelines.
Full job record
| Job ID | 3ac7b891838fe9eb5bcb999750508733983a5ba3 |
| Org ID | fb734c17-570b-4b98-b01b-7cd67163ef64 |
| Source ID | f98cc127-bcaf-44f0-8de7-5b489d57be28 |
| Board ID | f98cc127-bcaf-44f0-8de7-5b489d57be28 |
| Provider | smartrecruiters |
| Provider Job Key | 744000132449906 |
| Title | Sr. Cyber Governance, Risk & Compliance Analyst |
| Normalized Title | — |
| Status | active |
| Active | yes |
| Location Text | Carlsbad, CA, United States |
| Department | HQ - Legal |
| Team | — |
| Employment Type | full_time |
| Workplace Type | — |
| Remote Policy | — |
| Country | United States |
| Region | CA |
| City | Carlsbad |
| Salary Raw | USD 117000-151000 year |
| Salary Min | 117,000 |
| Salary Max | 151,000 |
| Salary Currency | USD |
| Salary Period | year |
| Source URL | https://jobs.smartrecruiters.com/VuoriInc/744000132449906-sr-cyber-governance-risk-compliance-analyst- |
| Apply URL | https://jobs.smartrecruiters.com/VuoriInc/744000132449906-sr-cyber-governance-risk-compliance-analyst-?oga=true |
| First Seen At | 2026-06-17 11:04:19Z |
| Last Seen At | 2026-06-19 10:50:15Z |
| Last Checked At | 2026-06-19 10:50:15Z |
| Last Changed At | 2026-06-17 11:04:19Z |
| Inactive At | — |
| Source Posted At | 2026-06-16 15:26:21Z |
| Source Updated At | — |
| Raw Payload Uri | s3://job-postings-prod-raw-590183727216/raw/provider=smartrecruiters/board=vuoriinc/date=2026-06-19/2026-06-19T10-49-50-674Z-ab4c141cd4a0fca62943979fc514c2ffd9a16d76bdeeca04d9b31b0bd8b9352f.json |
Event Fields
{
"content_hash": "5d571c5d705cbd21a1a5601f9f63c7e1643fb07f47e8ec2b047a7949ffb52d0e",
"source_hash": "eb771821bee0c7b728d6f8c9aba893cc867262c0e143cd36c54e34b7e95a5080",
"last_changed_at": "2026-06-17T11:04:19.034Z",
"active_status": "active"
}Parsed Structured
{
"language": "en",
"location": {
"raw": "Carlsbad, CA, United States",
"city": "Carlsbad",
"region": "CA",
"country": "United States",
"is_remote": false,
"confidence": 0.8
},
"salary_max": 151000,
"salary_min": 117000,
"inferred_at": "2026-06-19T10:50:15.353Z",
"launch_scope": {
"reason": "english_us_canada",
"included": true,
"language": "en",
"location": {
"raw": "Carlsbad, CA, United States",
"city": "Carlsbad",
"region": "CA",
"country": "United States",
"is_remote": false,
"confidence": 0.8
},
"countries": [
"United States"
]
},
"remote_policy": null,
"salary_period": "year",
"workplace_type": null,
"salary_currency": "USD"
}Extensions
{}Native Structured
{
"id": "744000132449906",
"ref": "https://api.smartrecruiters.com/v1/companies/vuoriinc/postings/744000132449906",
"name": "Sr. Cyber Governance, Risk & Compliance Analyst ",
"uuid": "73228d12-4444-4f1e-9acf-49e42abc04af",
"detail": {
"id": "744000132449906",
"name": "Sr. Cyber Governance, Risk & Compliance Analyst ",
"uuid": "73228d12-4444-4f1e-9acf-49e42abc04af",
"jobAd": {
"sections": {
"jobDescription": {
"text": "<p>The Senior Cyber Governance, Risk & Compliance Analyst is a senior level security professional whose primary responsibility is to design, operate, and continuously mature the organization’s Third‑Party / Vendor Risk Management (TPRM) program. In this role, the analyst serves as an embedded risk partner to the business, driving consistent, high‑quality vendor risk outcomes across the full third‑party lifecycle. </p><p>While TPRM is the core focus of this role, the analyst is also expected to contribute meaningfully across other Information Security and Privacy domains as needed, including privacy operations, cyber governance, risk and compliance (GRC), and security operations. This role is ideal for a practitioner who enjoys vendor risk but is comfortable flexing across adjacent security functions in a fast-moving environment. </p><p><strong>What you'll get to do: </strong></p><p><em>Third‑Party / Vendor Risk Management (Primary Focus) </em></p><ul><li>Design, implement, operate, and continuously mature the Third‑Party Risk Management program, evolving it from a reactive, compliance driven function into a proactive, risk-based capability. </li><li>Execute and oversee the full third-party risk lifecycle, including onboarding, inherent and residual risk assessments, due diligence, periodic reviews, contract risk review, issue management, remediation tracking, and ongoing monitoring. </li><li>Perform deep technical security and risk assessments of third parties, including cloud services, SaaS platforms, infrastructure providers, and technology vendors. </li><li>Review and interpret security assurance artifacts such as SOC 2 Type II reports, penetration test reports, CAIQ, SIG, ISO certifications, and other compliance attestations. </li><li>Evaluate complex vendor solutions, including API integrations with critical internal systems, cloud native architectures (AWS, Azure, GCP), and AI/ML platforms. </li><li>Assess and manages emerging third-party risks, including artificial intelligence risks such as data provenance, model integrity, data leakage, and secure handling of proprietary or regulated data. </li><li>Lead end-to-end issue and remediation management, ensuring accountability, effectiveness, and timely closure of identified control gaps. </li><li>Develop and maintain TPRM standards, playbooks, governance models, escalation paths, and operating procedures aligned with regulatory expectations and business needs. </li><li>Build and deliver meaningful reporting, dashboards, and metrics that provide leadership with clear visibility into third-party risk posture, trends, and decision points. </li></ul><p><em>Privacy & Data Protection (Primary Focus) </em></p><ul><li>Support privacy operations, including Data Subject Requests (DSRs), Data Protection Impact Assessments (DPIAs), and data mapping initiatives. </li><li>Partner with Privacy and Legal stakeholders to assess vendor and internal data processing risks and ensure appropriate safeguards are in place. </li><li>Contribute to privacy related risk assessments, controls validation, and remediation tracking as needed. </li></ul><p><em>Cyber Governance, Risk & Compliance (Supporting Responsibility) </em></p><ul><li>Support cyber GRC activities, including tracking information security risks, risk exceptions, and remediation plans. </li><li>Assist with the implementation and ongoing operation of security and risk management frameworks (e.g., NIST, ISO, SOC 2). </li><li>Contribute to audit and assurance activities by providing risk assessments, evidence, and clear articulation of control posture. </li></ul><p><em>Security Operations & Enablement (Supporting Responsibility) </em></p><ul><li>Provide support to information security operations as needed, including incident response activities, impact analysis, and post incident follow‑up. </li><li>Contribute to security awareness and training initiatives, helping translate risk themes into actionable guidance for the business. </li><li>Assist with cross functional security initiatives during periods of increased demand or emerging risk. </li></ul><p><em>Business Partnership & Advisory </em></p><ul><li>Serve as a trusted risk advisor to vendor relationship owners and senior stakeholders, reducing their operational burden while preserving clear risk ownership and accountability. </li><li>Partner closely with Legal, Compliance, Procurement, Technology, and Security teams to synthesize requirements and deliver practical, risk‑appropriate solutions. </li><li>Review vendor contracts and summarize risk‑relevant provisions, control obligations, and gaps, partnering with Legal to support risk‑informed contract decisions. </li><li>Escalate material risks, delays, or control gaps thoughtfully and early, framing issues in clear business terms and presenting well‑defined options for decision‑making. </li></ul>",
"title": "Job Description"
},
"qualifications": {
"text": "<p><strong>Who you are: </strong></p><ul><li>7+ years of progressive experience in Information Security, Third‑Party Risk Management, Vendor Risk Management, GRC, or Operational Risk. </li><li>Demonstrated experience owning, building, or leading a Third‑Party / Vendor Risk Management program. </li><li>Bachelor's degree in information security, Computer Science, Business Administration, or a related field or equivalent practical experience. </li><li>Strong experience conducting security risk assessments, assurance reviews, audits, and remediation management. </li><li>Deep technical understanding of cloud, SaaS, infrastructure, and AI vendor risk. </li><li>Hands on experience reviewing SOC 2, ISO 27001, penetration test reports, CAIQ, SIG, and similar security documentation. </li><li>Strong written and verbal communication skills, with the ability to translate technical risk into a clear business context for diverse audiences, including senior leadership. </li><li>Proven ability to work autonomously, manage competing priorities, and drive outcomes in a fast paced environment. </li></ul>",
"title": "Qualifications"
},
"companyDescription": {
"text": "<p>Vuori is re-defining what athletic apparel looks like: built to move and sweat in but designed with a casual aesthetic to transition into everyday life. We draw inspiration from an active coastal California lifestyle; an integration of fitness, creative expression and life. Our high energy fast paced retail environment is reflected in the clothes we make. We aim to inspire others to take on all aspects of their lives with clarity, enthusiasm and purpose…while having a lot of fun along the way. We are proud to be an outlet for opportunity and for personal growth and success.</p>",
"title": "Company Description"
},
"additionalInformation": {
"text": "<p><strong>Our investment in you:</strong></p><p>At Vuori, we’re proud to offer the following to our employees: </p><ul><li>Health Insurance </li><li>Savings and Retirement Plan  </li><li>Employee Assistance Program </li><li>Generous Vuori Discount & Industry Perks </li><li>Paid Time Off  </li><li>Wellness & Fitness benefits  </li></ul><p>The salary range for this role is $117,000 per year - $151,000 per year. This role is bonus eligible. </p><p>Vuori is proud to be an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.  </p><p>All your information will be kept confidential according to EEO guidelines.</p>",
"title": "Additional Information"
}
}
},
"jobId": "e07ec1ac-5f89-4b43-808d-f263e61391ad",
"active": true,
"company": {
"name": "Vuori, Inc",
"identifier": "VuoriInc"
},
"creator": {
"name": "",
"avatarUrl": ""
},
"jobAdId": "59d63fea-7840-42a3-9bf1-0f0f39226663",
"applyUrl": "https://jobs.smartrecruiters.com/VuoriInc/744000132449906-sr-cyber-governance-risk-compliance-analyst-?oga=true",
"function": {
"id": "other",
"label": "Other"
},
"industry": {
"id": "apparel_and_fashion",
"label": "Apparel And Fashion"
},
"language": {
"code": "en",
"label": "English",
"labelNative": "English (US)"
},
"location": {
"city": "Carlsbad",
"hybrid": false,
"region": "CA",
"remote": false,
"address": "5600 Avenida Encinas",
"country": "us",
"latitude": "33.1266348",
"longitude": "-117.3263578",
"postalCode": "92008",
"fullLocation": "Carlsbad, CA, United States"
},
"refNumber": "REF2580Q",
"department": {
"id": 3918269,
"label": "HQ - Legal"
},
"postingUrl": "https://jobs.smartrecruiters.com/VuoriInc/744000132449906-sr-cyber-governance-risk-compliance-analyst-",
"visibility": "PUBLIC",
"customField": [
{
"fieldId": "63bc660efccbc156feb67ebb",
"valueId": "ce8f8735-d1cf-4ec8-81a4-19fb8e010118",
"fieldLabel": "City",
"valueLabel": "Carlsbad, CA"
},
{
"fieldId": "63dc50dd762aa81747c3aa64",
"fieldLabel": "Hiring Manager Title",
"valueLabel": "Vice President, Information Security"
},
{
"fieldId": "COUNTRY",
"valueId": "us",
"fieldLabel": "Country/Region",
"valueLabel": "United States"
},
{
"fieldId": "63bcb8b23b624e0f8c60aab8",
"valueId": "8f17588e-fa73-42e4-8980-065d5496f1d6",
"fieldLabel": "Workplace Type",
"valueLabel": "Remote"
},
{
"fieldId": "63bcb91ba7ceb91bbe6a15c4",
"fieldLabel": "Hiring Manager Name",
"valueLabel": "Lance Mueller"
},
{
"fieldId": "63852e61c68b5935bb4a3b99",
"valueId": "3918269",
"fieldLabel": "Department",
"valueLabel": "HQ - Legal"
},
{
"fieldId": "63852e61c68b5935bb4a3b98",
"valueId": "default",
"fieldLabel": "Brands",
"valueLabel": "Vuori, Inc"
}
],
"referralUrl": "https://jobs.smartrecruiters.com/external-referrals/company/VuoriInc/publication/73228d12-4444-4f1e-9acf-49e42abc04af?dcr_ci=VuoriInc",
"compensation": {
"max": 151000,
"min": 117000,
"period": "YEARLY",
"currency": "USD"
},
"defaultJobAd": true,
"releasedDate": "2026-06-16T15:26:21.317Z",
"experienceLevel": {
"id": "mid_senior_level",
"label": "Mid-Senior Level"
},
"typeOfEmployment": {
"id": "permanent",
"label": "Full-time"
}
},
"company": {
"name": "Vuori, Inc",
"identifier": "VuoriInc"
},
"jobAdId": "59d63fea-7840-42a3-9bf1-0f0f39226663",
"function": {
"id": "other",
"label": "Other"
},
"industry": {
"id": "apparel_and_fashion",
"label": "Apparel And Fashion"
},
"language": {
"code": "en",
"label": "English",
"labelNative": "English (US)"
},
"location": {
"city": "Carlsbad",
"hybrid": false,
"region": "CA",
"remote": false,
"address": "5600 Avenida Encinas",
"country": "us",
"latitude": "33.1266348",
"longitude": "-117.3263578",
"postalCode": "92008",
"fullLocation": "Carlsbad, CA, United States"
},
"refNumber": "REF2580Q",
"department": {
"id": "3918269",
"label": "HQ - Legal"
},
"visibility": "PUBLIC",
"customField": [
{
"fieldId": "63bc660efccbc156feb67ebb",
"valueId": "ce8f8735-d1cf-4ec8-81a4-19fb8e010118",
"fieldLabel": "City",
"valueLabel": "Carlsbad, CA"
},
{
"fieldId": "COUNTRY",
"valueId": "us",
"fieldLabel": "Country/Region",
"valueLabel": "United States"
},
{
"fieldId": "63bcb8b23b624e0f8c60aab8",
"valueId": "8f17588e-fa73-42e4-8980-065d5496f1d6",
"fieldLabel": "Workplace Type",
"valueLabel": "Remote"
},
{
"fieldId": "63852e61c68b5935bb4a3b99",
"valueId": "3918269",
"fieldLabel": "Department",
"valueLabel": "HQ - Legal"
},
{
"fieldId": "63852e61c68b5935bb4a3b98",
"valueId": "default",
"fieldLabel": "Brands",
"valueLabel": "Vuori, Inc"
},
{
"fieldId": "63dc50dd762aa81747c3aa64",
"fieldLabel": "Hiring Manager Title",
"valueLabel": "Vice President, Information Security"
},
{
"fieldId": "63bcb91ba7ceb91bbe6a15c4",
"fieldLabel": "Hiring Manager Name",
"valueLabel": "Lance Mueller"
}
],
"defaultJobAd": true,
"releasedDate": "2026-06-16T15:26:21.317Z",
"detail_errors": [],
"experienceLevel": {
"id": "mid_senior_level",
"label": "Mid-Senior Level"
},
"typeOfEmployment": {
"id": "permanent",
"label": "Full-time"
}
}Get this page with API
Rendered from the bluedoor Job Postings API. Reproduce it:
GET https://api.bluedoor.sh/job-postings/v1/jobs/3ac7b891838fe9eb5bcb999750508733983a5ba3?include=descriptionJSONGET https://api.bluedoor.sh/job-postings/v1/orgs/fb734c17-570b-4b98-b01b-7cd67163ef64JSONGET https://api.bluedoor.sh/job-postings/v1/sources/f98cc127-bcaf-44f0-8de7-5b489d57be28JSONGET https://api.bluedoor.sh/job-postings/v1/jobs/3ac7b891838fe9eb5bcb999750508733983a5ba3/eventsJSON